$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa File: 3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa (raw, json) Hash identifier: xhryfYfzHBN5m9z9pyFe1e1JglGYug/9w2bKWO+sVR8= Subject key identifier: 21:EA:1D:2A:7F:57:2C:CB:C0:CB:37:5D:F6:C6:60:BF:FF:2F:F8:59 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584A43DB02EF29DBE340A52C8761 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 3630 IP address blocks: 199.109.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:02:ef:29:db:e3:40:a5:2c:87:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=d8580971-8260-405f-ab1f-66f437f5c7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:2d:a4:7f:af:44:db:c5:10:e7:7b:51:1e: 4e:e8:b8:8b:22:cb:35:a1:72:d6:be:2c:e4:c3:fa: 7d:b4:5a:3b:66:7e:a0:56:40:40:a2:a4:e3:cb:00: 72:16:a8:c9:9d:07:25:f3:16:57:8a:21:89:5f:e6: 71:29:bd:29:df:f5:67:86:2c:2b:99:26:97:4d:d5: ac:cb:09:3c:8f:2f:d7:c5:99:f5:4d:0c:85:a0:13: ab:ec:a7:52:ad:d3:d9:3c:ba:57:69:f0:46:aa:14: 18:c7:71:1f:71:0e:74:77:06:68:e5:e2:f7:b2:67: 16:70:72:29:0d:f0:4c:1f:8c:fe:2b:80:6e:94:58: 92:f6:41:48:aa:0d:f4:cd:83:38:96:7c:4e:41:a4: 5c:fe:50:53:8e:36:37:3a:99:cc:77:27:32:36:31: 2a:a7:51:87:ec:5a:6c:e2:61:d6:ed:c8:06:01:e6: 75:4c:d5:e0:7a:db:35:84:68:be:b8:21:c6:e3:ab: 27:42:5d:0d:45:6a:72:c6:3d:2e:14:40:8c:00:11: cf:a6:e2:e5:6b:28:69:3d:26:fc:e3:4f:97:35:9b: 57:50:d0:70:6c:10:74:33:4f:8f:ca:c9:3e:70:90: 30:4f:3c:bb:28:4b:2c:fd:10:6a:a0:fc:85:b8:23: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EA:1D:2A:7F:57:2C:CB:C0:CB:37:5D:F6:C6:60:BF:FF:2F:F8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:db:a0:6e:1a:57:21:c5:9c:08:7c:95:e4:4b:77:71:50:fb: 70:43:82:44:30:61:8a:89:75:88:73:45:5c:02:2c:d9:2e:e2: 8e:f6:95:ed:e7:65:d9:e8:bc:11:2c:c0:7a:9c:66:0e:d0:1e: 48:17:9e:98:22:d1:5f:7e:f6:45:ca:49:dc:8c:97:a1:2d:c0: ff:4b:db:43:93:db:f1:32:57:00:c6:6a:94:7e:24:c7:cf:0b: 9b:74:2b:45:32:55:73:43:59:ba:c0:b1:fb:bc:81:be:43:4b: fb:35:47:bc:eb:38:65:9d:a1:8f:36:50:4a:29:93:6b:30:94: 46:fb:2d:a7:bb:b4:a4:3e:46:af:65:3d:4f:75:c1:c2:44:e1: ee:b3:50:19:f7:eb:7a:6a:a1:08:40:34:96:29:34:51:43:0c: 7b:a7:57:47:a0:80:37:03:a2:00:09:d8:f2:59:83:e8:35:9d: 01:1a:23:8f:9d:6e:70:8f:24:66:cc:08:a5:7c:2b:03:d7:8d: a9:1d:0f:9b:60:d1:4a:2f:a9:88:d9:48:0a:51:fb:80:13:57: 07:9b:2e:b3:49:2f:f2:e1:89:e3:2d:6c:a4:6c:4d:a7:68:54: c1:6f:ec:2d:76:be:5c:0e:42:16:be:5e:8b:c4:97:24:a9:d2: 5b:19:d6:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wLvKdvjQKUsh2EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZDg1ODA5NzEtODI2MC00MDVmLWFiMWYtNjZmNDM3ZjVjN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD8tpH+vRNvFEOd7UR5O6LiLIss1oXLWvizk w/p9tFo7Zn6gVkBAoqTjywByFqjJnQcl8xZXiiGJX+ZxKb0p3/VnhiwrmSaXTdWs ywk8jy/XxZn1TQyFoBOr7KdSrdPZPLpXafBGqhQYx3EfcQ50dwZo5eL3smcWcHIp DfBMH4z+K4BulFiS9kFIqg30zYM4lnxOQaRc/lBTjjY3OpnMdycyNjEqp1GH7Fps 4mHW7cgGAeZ1TNXgets1hGi+uCHG46snQl0NRWpyxj0uFECMABHPpuLlayhpPSb8 40+XNZtXUNBwbBB0M0+Pysk+cJAwTzy7KEss/RBqoPyFuCM8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHqHSp/VyzLwMs3XfbGYL//L/hZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvM2FhZWRmMDktN2QyZS0z ZTNiLThiYWEtMWE2ZmM0MGRmMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjboG4aVyHFnAh8leRLd3FQ+3BDgkQwYYqJdYhzRVwCLNku4o72le3n ZdnovBEswHqcZg7QHkgXnpgi0V9+9kXKSdyMl6EtwP9L20OT2/EyVwDGapR+JMfP C5t0K0UyVXNDWbrAsfu8gb5DS/s1R7zrOGWdoY82UEopk2swlEb7Lae7tKQ+Rq9l PU91wcJE4e6zUBn363pqoQhANJYpNFFDDHunV0eggDcDogAJ2PJZg+g1nQEaI4+d bnCPJGbMCKV8KwPXjakdD5tg0UovqYjZSApR+4ATVwebLrNJL/LhieMtbKRsTado VMFv7C12vlwOQha+XovElySp0lsZ1js= -----END CERTIFICATE-----Generated at Mon Jun 30 08:38:08 2025 by rpki-client